Service sub-processors

Vendors that may process Customer Data when you use the Whatrite product.

Meta / WhatsApp
Meta Platforms, Inc.
Purpose
Sending and receiving messages via the official WhatsApp Business Cloud API.
Data processed
Phone numbers, message content, message metadata, contact profile fields.
Region
Global (United States primary)
View DPA for Meta / WhatsApp
Razorpay
Razorpay Software Private Limited
Purpose
Payment processing, subscriptions and invoicing for Indian customers.
Data processed
Order and payment metadata, billing email, GSTIN. Card / UPI credentials are handled solely by Razorpay and never reach Whatrite servers.
Region
India
View DPA for Razorpay
Railway
Railway Corp.
Purpose
Application hosting — compute, managed PostgreSQL and managed Redis.
Data processed
All Customer Data at rest, encrypted both at the application layer and by the host.
Region
United States
View DPA for Railway
Amazon S3
Amazon Web Services, Inc.
Purpose
Object storage for uploaded media, templates and attachments.
Data processed
User-uploaded files (images, documents, audio) and template media assets.
Region
United States
View DPA for Amazon S3
Sentry
Functional Software, Inc.
Purpose
Application error monitoring and release tracking.
Data processed
Error stack traces, request metadata, user identifiers (email / id) and feature flags.
Region
United States
View DPA for Sentry
Anthropic (Claude)
Anthropic, PBC
Opt-in only
Purpose
Optional AI features — message understanding and response generation.
Data processed
Message content submitted for inference. Sent only when AI is explicitly enabled on a workspace; not used to train Anthropic models per their commercial terms.
Region
United States
View DPA for Anthropic (Claude)
OpenAI (GPT)
OpenAI OpCo, LLC
Opt-in only
Purpose
Optional AI features — message understanding and response generation.
Data processed
Message content submitted for inference. Sent only when AI is explicitly enabled on a workspace; not used to train OpenAI models per their commercial terms.
Region
United States
View DPA for OpenAI (GPT)

Service sub-processors
Vendor	Purpose	Data processed	Region	DPA
Meta / WhatsApp Meta Platforms, Inc.	Sending and receiving messages via the official WhatsApp Business Cloud API.	Phone numbers, message content, message metadata, contact profile fields.	Global (United States primary)	View DPA for Meta / WhatsApp
Razorpay Razorpay Software Private Limited	Payment processing, subscriptions and invoicing for Indian customers.	Order and payment metadata, billing email, GSTIN. Card / UPI credentials are handled solely by Razorpay and never reach Whatrite servers.	India	View DPA for Razorpay
Railway Railway Corp.	Application hosting — compute, managed PostgreSQL and managed Redis.	All Customer Data at rest, encrypted both at the application layer and by the host.	United States	View DPA for Railway
Amazon S3 Amazon Web Services, Inc.	Object storage for uploaded media, templates and attachments.	User-uploaded files (images, documents, audio) and template media assets.	United States	View DPA for Amazon S3
Sentry Functional Software, Inc.	Application error monitoring and release tracking.	Error stack traces, request metadata, user identifiers (email / id) and feature flags.	United States	View DPA for Sentry
Anthropic (Claude)Opt-in only Anthropic, PBC	Optional AI features — message understanding and response generation.	Message content submitted for inference. Sent only when AI is explicitly enabled on a workspace; not used to train Anthropic models per their commercial terms.	United States	View DPA for Anthropic (Claude)
OpenAI (GPT)Opt-in only OpenAI OpCo, LLC	Optional AI features — message understanding and response generation.	Message content submitted for inference. Sent only when AI is explicitly enabled on a workspace; not used to train OpenAI models per their commercial terms.	United States	View DPA for OpenAI (GPT)

Marketing-website sub-processors

Vendors that process visitor data only on our public marketing website. They are not loaded inside the product.

Google Tag Manager
Google LLC
Purpose
Tag management and marketing analytics on the public marketing website only — not loaded inside the product.
Data processed
IP address, page-view metadata, consent state. Subject to consent banner choices.
Region
Global
View DPA for Google Tag Manager

Marketing-website sub-processors
Vendor	Purpose	Data processed	Region	DPA
Google Tag Manager Google LLC	Tag management and marketing analytics on the public marketing website only — not loaded inside the product.	IP address, page-view metadata, consent state. Subject to consent banner choices.	Global	View DPA for Google Tag Manager

Notification of changes

We update this page when we add or remove a sub-processor. To be notified of changes, email hello@whatrite.dev with the subject “Sub-processor notifications”.

For the legal terms governing our use of sub-processors, see our Data Processing Addendum. For our security practices, see the Security page.

Service sub-processors

Vendors that may process Customer Data when you use the Whatrite product.

Meta / WhatsApp

Meta Platforms, Inc.

Purpose

Sending and receiving messages via the official WhatsApp Business Cloud API.

Data processed

Phone numbers, message content, message metadata, contact profile fields.

Region

Global (United States primary)

View DPA

Razorpay

Razorpay Software Private Limited

Purpose

Payment processing, subscriptions and invoicing for Indian customers.

Data processed

Order and payment metadata, billing email, GSTIN. Card / UPI credentials are handled solely by Razorpay and never reach Whatrite servers.

Region

India

View DPA

Railway

Railway Corp.

Purpose

Application hosting — compute, managed PostgreSQL and managed Redis.

Data processed

All Customer Data at rest, encrypted both at the application layer and by the host.

Region

United States

View DPA

Amazon S3

Amazon Web Services, Inc.

Purpose

Object storage for uploaded media, templates and attachments.

Data processed

User-uploaded files (images, documents, audio) and template media assets.

Region

United States

View DPA

Sentry

Functional Software, Inc.

Purpose

Application error monitoring and release tracking.

Data processed

Error stack traces, request metadata, user identifiers (email / id) and feature flags.

Region

United States

View DPA

Anthropic (Claude)

Anthropic, PBC

Opt-in only

Purpose

Optional AI features — message understanding and response generation.

Data processed

Message content submitted for inference. Sent only when AI is explicitly enabled on a workspace; not used to train Anthropic models per their commercial terms.

Region

United States

View DPA

OpenAI (GPT)

OpenAI OpCo, LLC

Opt-in only

Purpose

Optional AI features — message understanding and response generation.

Data processed

Message content submitted for inference. Sent only when AI is explicitly enabled on a workspace; not used to train OpenAI models per their commercial terms.

Region

United States

View DPA

Service sub-processors
Vendor	Purpose	Data processed	Region	DPA
Meta / WhatsApp Meta Platforms, Inc.	Sending and receiving messages via the official WhatsApp Business Cloud API.	Phone numbers, message content, message metadata, contact profile fields.	Global (United States primary)	View DPA for Meta / WhatsApp
Razorpay Razorpay Software Private Limited	Payment processing, subscriptions and invoicing for Indian customers.	Order and payment metadata, billing email, GSTIN. Card / UPI credentials are handled solely by Razorpay and never reach Whatrite servers.	India	View DPA for Razorpay
Railway Railway Corp.	Application hosting — compute, managed PostgreSQL and managed Redis.	All Customer Data at rest, encrypted both at the application layer and by the host.	United States	View DPA for Railway
Amazon S3 Amazon Web Services, Inc.	Object storage for uploaded media, templates and attachments.	User-uploaded files (images, documents, audio) and template media assets.	United States	View DPA for Amazon S3
Sentry Functional Software, Inc.	Application error monitoring and release tracking.	Error stack traces, request metadata, user identifiers (email / id) and feature flags.	United States	View DPA for Sentry
Anthropic (Claude)Opt-in only Anthropic, PBC	Optional AI features — message understanding and response generation.	Message content submitted for inference. Sent only when AI is explicitly enabled on a workspace; not used to train Anthropic models per their commercial terms.	United States	View DPA for Anthropic (Claude)
OpenAI (GPT)Opt-in only OpenAI OpCo, LLC	Optional AI features — message understanding and response generation.	Message content submitted for inference. Sent only when AI is explicitly enabled on a workspace; not used to train OpenAI models per their commercial terms.	United States	View DPA for OpenAI (GPT)

Marketing-website sub-processors

Vendors that process visitor data only on our public marketing website. They are not loaded inside the product.

Google Tag Manager

Google LLC

Purpose

Tag management and marketing analytics on the public marketing website only — not loaded inside the product.

Data processed

IP address, page-view metadata, consent state. Subject to consent banner choices.

Region

Global

View DPA

Marketing-website sub-processors
Vendor	Purpose	Data processed	Region	DPA
Google Tag Manager Google LLC	Tag management and marketing analytics on the public marketing website only — not loaded inside the product.	IP address, page-view metadata, consent state. Subject to consent banner choices.	Global	View DPA for Google Tag Manager

Notification of changes

We update this page when we add or remove a sub-processor. To be notified of changes, email hello@whatrite.dev with the subject “Sub-processor notifications”.

For the legal terms governing our use of sub-processors, see our Data Processing Addendum. For our security practices, see the Security page.

Sub-processors

Service sub-processors

Marketing-website sub-processors

Notification of changes

Sub-processors

Service sub-processors

Marketing-website sub-processors

Notification of changes